Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130302e302f32322d3233203d3e20323635393035.roa
File:                     3133312e3139362e3130302e302f32322d3233203d3e20323635393035.roa (raw, json)
Hash identifier:          sWwV/zjGt66WWsow2ay0wLfzdSaUkhkFODwp/hFItH4=
Subject key identifier:   55:DC:68:8D:BC:37:CC:F7:E9:36:F5:48:53:D5:83:1D:EC:03:73:4C
Certificate issuer:       /CN=3D6DB1BC149116AC9490618E05F0ECC88B68F4A4
Certificate serial:       4AE4BB10CF2F8DE1DD2B2D21A525D183256BF27F
Authority key identifier: 3D:6D:B1:BC:14:91:16:AC:94:90:61:8E:05:F0:EC:C8:8B:68:F4:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D6DB1BC149116AC9490618E05F0ECC88B68F4A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130302e302f32322d3233203d3e20323635393035.roa
Signing time:             Mon 04 Oct 2021 18:49:07 +0000
ROA not before:           Mon 04 Oct 2021 18:44:07 +0000
ROA not after:            Mon 03 Oct 2022 18:49:07 +0000
asID:                     265905
IP address blocks:        131.196.100.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e4:bb:10:cf:2f:8d:e1:dd:2b:2d:21:a5:25:d1:83:25:6b:f2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D6DB1BC149116AC9490618E05F0ECC88B68F4A4
        Validity
            Not Before: Oct  4 18:44:07 2021 GMT
            Not After : Oct  3 18:49:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b1:20:fb:ac:0e:9d:81:8f:42:a5:0c:0f:e7:
                    a7:4f:42:65:5c:cd:6b:ad:7f:d9:86:fc:e8:26:f2:
                    6b:b4:d4:c6:28:9c:7f:f7:dd:11:30:0f:82:a2:96:
                    29:73:a1:2f:6c:a8:96:4c:82:7d:92:bf:84:71:30:
                    36:53:f1:dd:02:8d:66:98:e7:94:f5:b6:43:76:c4:
                    36:7d:3a:42:9f:d9:44:76:04:54:d1:9a:4f:f6:a4:
                    65:2c:72:3c:58:52:80:62:10:d7:b6:f8:85:a6:c5:
                    8e:b4:b4:35:0a:5c:7a:9f:b9:88:a3:04:cd:9c:a3:
                    24:1a:bd:e0:3e:57:16:ed:fd:a1:27:e6:4d:ac:75:
                    c6:78:88:95:13:0b:58:51:78:fe:f7:dd:69:9e:2e:
                    26:ee:7e:9c:41:78:ae:b4:94:e5:6d:e9:99:a5:92:
                    ad:06:1e:fb:fc:0b:4d:9f:27:86:30:77:b3:e9:dc:
                    49:72:c8:d1:eb:9f:75:92:e7:a5:b0:30:56:74:8f:
                    00:b6:db:81:3d:e6:69:08:82:26:a4:62:c1:52:36:
                    62:62:91:6d:20:3d:c2:dc:2f:1e:70:27:a6:90:df:
                    2e:f1:af:43:69:8b:76:35:00:3b:0b:1f:83:22:a7:
                    fd:4b:78:df:57:d3:c7:e3:17:25:bb:39:c2:4a:47:
                    eb:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DC:68:8D:BC:37:CC:F7:E9:36:F5:48:53:D5:83:1D:EC:03:73:4C
            X509v3 Authority Key Identifier:
                keyid:3D:6D:B1:BC:14:91:16:AC:94:90:61:8E:05:F0:EC:C8:8B:68:F4:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3D6DB1BC149116AC9490618E05F0ECC88B68F4A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3D6DB1BC149116AC9490618E05F0ECC88B68F4A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AfC1YUPv5j8E8knc7CYtDwpnvX35nKwESPfDmxSuCuFJ/0/3133312e3139362e3130302e302f32322d3233203d3e20323635393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ce:51:74:c1:b8:a9:f3:38:5e:8c:ef:57:76:26:77:75:f5:48:
         db:34:d1:a8:ef:3c:bc:b0:65:91:9e:56:fc:85:ee:dd:73:56:
         ee:f4:9e:bf:58:82:29:0b:aa:dd:a6:1a:87:0d:a6:3d:e2:18:
         f3:9e:0f:b1:85:84:8b:17:85:36:31:a3:cb:b3:9b:2a:8d:ed:
         a8:73:24:4f:6a:9f:02:c5:12:92:78:f6:9c:21:39:ca:65:9d:
         46:e5:3e:57:56:72:35:24:51:b3:86:13:22:b1:8d:3b:3d:af:
         f3:a7:4c:28:7c:e9:09:92:38:a2:25:e9:01:5f:2e:57:f2:0f:
         12:b6:e0:68:5d:8d:24:89:be:2f:e2:9c:db:26:1a:48:2b:f6:
         45:a3:25:4c:86:19:01:b2:5e:4a:26:a1:9c:9e:5f:4c:63:e7:
         bf:2c:01:35:3f:4e:30:ab:be:24:cb:2f:01:17:17:cd:e1:0d:
         b5:79:fa:fe:6d:2f:19:9a:5e:ad:8e:e4:0a:68:35:2b:b1:dd:
         23:1c:01:b5:09:da:4c:c2:eb:19:e2:cd:2e:6a:5f:0f:dc:4a:
         43:b8:ae:2f:22:c4:f2:1e:4c:48:80:2b:a1:41:00:11:24:24:
         0a:fb:3e:23:fb:99:1a:8b:71:a6:3c:9c:5c:b3:6b:47:5d:24:
         3f:6f:8c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:49:09 2025 by rpki-client